$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft File: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft (raw, json) Hash identifier: 6JTABXx2i2a61w9IMS9kJiLxpvhF2RImRpsadFwJf6g= Subject key identifier: CE:CA:8C:80:4A:60:89:0B:DC:BB:5C:42:D8:FD:B1:4D:A2:7A:11:D8 Authority key identifier: D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72 Certificate issuer: /CN=A9120CDE0000/serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472 Certificate serial: 3FAC889B1245BE6336B6626050D8577922D17302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft Manifest number: 93 Signing time: Wed 28 Oct 2026 00:59:00 +0000 Manifest this update: Wed 28 Oct 2026 00:54:00 +0000 Manifest next update: Sat 31 Oct 2026 08:02:00 +0000 Files and hashes: 1: 3130332e3132332e342e302f32332d3233203d3e2034383337.roa (hash: k74aKc9hrGjjKtFfU03UFmb5lbVypa9TVHs7t7K9DFc=) 2: 3130332e3132332e342e302f32322d3232203d3e2034383337.roa (hash: uzVKo4gitP7RigvC6WVexzNZzL0YYShPIrlVbSuh1Mw=) 3: D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl (hash: VHXtyIsADmzNPuyLLa/JkaT+xpxlswjSTxeP+rrsE2Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ac:88:9b:12:45:be:63:36:b6:62:60:50:d8:57:79:22:d1:73:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE0000, serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472 Validity Not Before: Oct 28 00:54:00 2026 GMT Not After : Oct 31 08:02:00 2026 GMT Subject: CN=CECA8C804A60890BDCBB5C42D8FDB14DA27A11D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:44:c7:3f:86:42:c6:72:72:95:64:9d:16: cf:c8:d8:ee:e9:87:d6:87:0a:b0:2a:44:dc:91:5f: 94:9e:8a:cc:f1:87:8d:0e:29:a8:44:f3:ce:af:1d: 56:b4:3a:25:22:27:9b:9e:26:0f:1d:57:5f:23:75: 69:b8:1e:8a:d9:e1:0c:76:bf:8f:2f:6b:f8:29:28: f8:4b:00:dc:b6:f7:02:ef:4f:ef:f1:e3:bc:fc:fe: 38:d5:9b:fe:05:26:f1:1e:e3:3c:0c:ef:d9:ac:b5: 77:76:96:89:c9:69:f3:4b:f2:c4:06:30:cd:0b:26: 58:e0:bc:ed:7a:bd:81:23:07:a3:8a:d4:77:d3:b3: a4:c3:37:fb:1b:bb:af:bc:06:38:0f:50:c6:b7:a0: 69:cd:41:24:11:12:2a:e9:ea:ca:5c:39:c8:f8:b4: a3:52:6f:ad:67:70:51:bb:60:d2:6b:4a:6b:26:63: e8:09:d2:3a:4e:c3:d1:a0:a4:99:9d:10:1e:c3:3d: 1c:c5:13:e4:c5:a6:64:74:5d:dd:2e:bd:03:08:f3: f5:28:98:ce:4a:13:c5:14:f7:c4:50:43:e0:e6:51: 10:5a:7a:06:31:b7:4d:71:40:8e:f0:ef:dd:13:07: ce:42:cd:33:52:3f:6b:8f:68:85:cc:8a:4c:5f:f1: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CA:8C:80:4A:60:89:0B:DC:BB:5C:42:D8:FD:B1:4D:A2:7A:11:D8 X509v3 Authority Key Identifier: keyid:D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:45:e0:dc:fb:31:1f:80:73:d3:13:36:f6:f2:81:83:70:64: f1:ea:a6:2f:45:eb:23:da:cc:69:f8:39:7e:f5:ad:97:6b:17: a8:e4:86:1a:80:cb:8d:d4:53:06:ea:a0:14:bb:c8:65:d8:e2: 5f:0b:c9:35:bc:41:64:ce:14:07:93:40:83:8c:73:16:1b:2c: 62:33:86:fd:41:34:bf:e2:54:0d:45:6c:b1:01:c7:21:74:19: 7f:14:e2:01:d6:80:eb:a9:0d:80:e6:de:68:d0:a1:c4:c3:21: cc:33:5e:12:16:7f:42:8f:6a:0f:89:c2:1d:6d:9c:ce:68:af: 64:48:21:66:06:f0:99:96:7a:04:3a:0f:1b:1d:e0:af:0f:a5: f7:65:83:81:d5:f1:30:56:1d:5d:74:dc:69:ea:3a:d0:88:a1: d0:78:b0:5a:cf:50:23:d9:6d:c9:3a:5b:50:b4:67:62:3c:6a: 1c:47:a1:48:b7:c4:79:1d:27:03:62:11:02:b8:38:38:ad:cd: a3:64:b4:f6:6f:17:19:a8:be:c7:35:f0:1a:52:07:9b:31:d2: 3e:b6:93:02:55:12:ed:fb:1b:54:60:93:68:80:9e:40:52:0f: 86:1e:26:bd:d8:ee:92:4e:a3:b3:29:7d:1b:92:0e:27:35:77: fc:72:e7:3e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP6yImxJFvmM2tmJgUNhXeSLRcwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjBDREUwMDAwMTEwLwYDVQQFEyhEMEVBMEFBOEMz NDZGRTY3M0M2ODY3RjJCOUNBMDY4MTlGNThDNDcyMB4XDTI2MTAyODAwNTQwMFoX DTI2MTAzMTA4MDIwMFowMzExMC8GA1UEAxMoQ0VDQThDODA0QTYwODkwQkRDQkI1 QzQyRDhGREIxNERBMjdBMTFEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALCkRMc/hkLGcnKVZJ0Wz8jY7umH1ocKsCpE3JFflJ6KzPGHjQ4pqETzzq8d VrQ6JSInm54mDx1XXyN1abgeitnhDHa/jy9r+Cko+EsA3Lb3Au9P7/HjvPz+ONWb /gUm8R7jPAzv2ay1d3aWiclp80vyxAYwzQsmWOC87Xq9gSMHo4rUd9OzpMM3+xu7 r7wGOA9Qxregac1BJBESKunqylw5yPi0o1JvrWdwUbtg0mtKayZj6AnSOk7D0aCk mZ0QHsM9HMUT5MWmZHRd3S69Awjz9SiYzkoTxRT3xFBD4OZREFp6BjG3TXFAjvDv 3RMHzkLNM1I/a49ohcyKTF/xsbsCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTOyoyA SmCJC9y7XELY/bFNonoR2DAfBgNVHSMEGDAWgBTQ6gqow0b+ZzxoZ/K5ygaBn1jE cjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzIyMTk3ODgxNDIxODQxLzAvRDBFQTBB QThDMzQ2RkU2NzNDNjg2N0YyQjlDQTA2ODE5RjU4QzQ3Mi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvME9vS3FNTkdf bWM4YUdmeXVjb0dnWjlZeEhJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjMyMjE5Nzg4 MTQyMTg0MS8wL0QwRUEwQUE4QzM0NkZFNjczQzY4NjdGMkI5Q0EwNjgxOUY1OEM0 NzIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQApReDc+zEfgHPTEzb28oGDcGTx6qYvResj2sxp+Dl+9a2X axeo5IYagMuN1FMG6qAUu8hl2OJfC8k1vEFkzhQHk0CDjHMWGyxiM4b9QTS/4lQN RWyxAcchdBl/FOIB1oDrqQ2A5t5o0KHEwyHMM14SFn9Cj2oPicIdbZzOaK9kSCFm BvCZlnoEOg8bHeCvD6X3ZYOB1fEwVh1ddNxp6jrQiKHQeLBaz1Aj2W3JOltQtGdi PGocR6FIt8R5HScDYhECuDg4rc2jZLT2bxcZqL7HNfAaUgebMdI+tpMCVRLt+xtU YJNogJ5AUg+GHia92O6STqOzKX0bkg4nNXf8cuc+ -----END CERTIFICATE-----Generated at Wed Oct 28 21:51:57 2026 by rpki-client